[gudata]

Stack

• Base: Iris docs: redis-iris 1.0.0 suite operations (upgrade, rollback, recovery, uninstall) #4470 (docs/iris-suite-1.0-operations)
• This pull request: focused correctness and safety corrections

Ticket ID

MOD-20386
Link: https://redislabs.atlassian.net/browse/MOD-20386

Description

This follow-up corrects unsafe or misleading operational guidance found while checking #4470 against the Redis Iris 1.0.0 technical design, executable lifecycle runbooks, and release evidence.

It removes the Redis Open Source example that granted unrestricted +@all, ~*, and &* permissions, distinguishes metadata Redis entries from unrelated URLs in aggregate Secrets, and states the prerequisites and untested limitation of recovery without chart-generated Secrets. It also clarifies that Helm rollback does not undo Redis writes, uses the documented 15-minute upgrade and rollback timeout, and makes preflight validate the target chart version.

The pull request is intentionally based on docs/iris-suite-1.0-operations so the original documentation pull request can take these corrections without mixing in unrelated main changes.

Testing

• git diff --check: passed.
• ASDF_HUGO_VERSION=extended-0.143.0 asdf exec hugo --gc --logLevel warning: rendered the changed pages with no errors in either Iris page and no unresolved links from this change. The repository-wide run still reports existing missing PostCSS and generated-example prerequisites.
• pr-deep-review: six initial findings; six challenger-confirmed findings; all addressed.
• ponytail-review: passed with no remaining findings.

Merge danger

Door: two-way. Documentation-only changes can be reverted independently.

Blast radius: Redis Iris self-managed install and operations guidance only.

---

Note

Low Risk
Documentation-only edits to Iris self-managed operations pages; no application or infrastructure code changes.

Overview
This PR tightens Redis Iris self-managed install and operations docs so they match safe lifecycle behavior rather than oversimplified Helm semantics.

Preflight now templates against <chart-version> instead of a fixed 1.0.0, so checks match the release you are about to install or upgrade.

Upgrade and rollback examples add --timeout 15m alongside --atomic / --wait, and the text now states that atomic rollback restores Kubernetes resources and Helm values but does not revert data or metadata written to Redis. Rollback wording drops the incorrect implication that metadata Redis keys/grants are unchanged by rollback alone.

Metadata Redis credential rotation replaces an Open Source redis-cli example that granted +@all, ~*, and &* with guidance to mirror the current ACL user’s rules, persist ACLs correctly, and verify on every cluster node. Secret updates are scoped to metadata Redis connection entries in the values table, not every key in aggregate Secrets.

Namespace recovery when chart-generated credential Secrets are lost now requires restoring customer-supplied Secrets first, limits agent-key continuity to a surviving Identity Service metadata database, and notes the path is documented but untested.

^{Reviewed by Cursor Bugbot for commit 950204d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

Staging links:
https://redis.io/docs/staging/MOD-20386-correct-iris-1-0-operations/operate/iris/self-managed/
https://redis.io/docs/staging/MOD-20386-correct-iris-1-0-operations/operate/iris/self-managed/operations/

[github-actions]

🧠 Redis Memory

Found 5 related items from repository history (5 new this commit):

• PR — Iris self-managed docs: align with the redis-iris global Helm chart release 🆕

  Iris self-managed docs: align with the global Helm chart release

• PR — MOD-18825: Correct Iris self-managed docs for RAM 0.7.0 and LangCache 0.0.1 🆕

  Ticket: MOD-18825 · Control Plane OpenAPI text: [redislabsdev/iris#1648](https://github.

• PR — Iris docs: redis-iris 1.0.0 suite operations (upgrade, rollback, recovery, uninstall) 🆕

  Draft. It tracks the redis-iris 1.0.0 on-prem release. It adds the lifecycle and operations content from M6 (redislabsdev/iris#2368, merge

• PR — Iris docs: GA consistency pass on the 1.0 release and CLI 🆕

  Part of the GA pass for Redis Iris GA docs #4400. It brings iris-ga-docs in line with the 1.0 release and the current redis-iris CLI.

• PR — WIP: Redis Agent Playbooks self-managed operator docs 🆕

  MOD-19679 — Self-managed Redis Agent Playbooks operator documentation.

Memory updated at 950204d